Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-10520

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:402b1788aec8b58abc45ccb9411924ce99d10d925ed35ec69348dd18bd07ab56
Known exploited
CISA KEV
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"defaultStatus":"affected","product":"Sentry","vendor":"ivanti","versions":[{"status":"unaffected","version":"R10.5.2"},{"status":"unaffected","version":"R10.6.2"},{"status":"unaffected","version":"R10.7.1"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0b83059a652e7621fca531381cf3b470c58062dd1e817676f1ee2162156d9cf5 · sha256:37a3eb1256942e5f… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":10,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:0b83059a652e7621fca531381cf3b470c58062dd1e817676f1ee2162156d9cf5 · sha256:37a3eb1256942e5f… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-78","description":"CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:0b83059a652e7621fca531381cf3b470c58062dd1e817676f1ee2162156d9cf5 · sha256:37a3eb1256942e5f… · /containers/cna/problemTypes/0/descriptions/0

Known exploitation assertions

2 source assertions
{"cwes":["CWE-78"],"dateAdded":"2026-06-11","dueDate":"2026-06-14","knownRansomwareCampaignUse":"Unknown","notes":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-10520","product":"Sentry","requiredAction":"Apply mitigations in accord…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:390337a789ba2c26c7918464f4abd6950a2826118769161182f940b54d54403a · sha256:635dff916c4092c0… · /vulnerabilities/42
    Open source location →
{"cwes":["CWE-78"],"dateAdded":"2026-06-11","dueDate":"2026-06-14","knownRansomwareCampaignUse":"Unknown","notes":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-10520","product":"Sentry","requiredAction":"Apply mitigations in accord…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:e8d7f676a3f5d334a48a482c5ccb883e5bd4062a65b97a3e482553d7a4ca931e · sha256:16acee8334e59e44… · /vulnerabilities/39
    Open source location →

Source references

3 source assertions
{"tags":["exploit"],"url":"https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0b83059a652e7621fca531381cf3b470c58062dd1e817676f1ee2162156d9cf5 · sha256:37a3eb1256942e5f… · /containers/adp/0/references/0
{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0b83059a652e7621fca531381cf3b470c58062dd1e817676f1ee2162156d9cf5 · sha256:37a3eb1256942e5f… · /containers/cna/references/0
{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0b83059a652e7621fca531381cf3b470c58062dd1e817676f1ee2162156d9cf5 · sha256:37a3eb1256942e5f… · /containers/adp/0/references/1

Attribution and limitations

  • CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer